Supabase vs Payload CMS
The open source Firebase alternative with Postgres
vs. TypeScript-first open-source headless CMS — code-first, config-driven
Pricing tiers
Supabase
Free
Perfect for experiments. Projects pause after 7 days inactivity.
Free
Pro
Production-ready. Usage-based overages apply.
$25/mo
Team
For teams; includes SOC2 attestation and priority support.
$599/mo
Enterprise
Custom quotas, HIPAA compliance, dedicated support.
Custom
Payload CMS
Open Source (self-host)
MIT license. Run free on any Node host. Full admin + APIs.
$0 base (usage-based)
Cloud — Standard
$35/month. 3 GB DB storage, 30 GB file storage, 40 GB bandwidth.
$35/mo
Cloud — Pro
$199/month. Higher resources + priority support.
$199/mo
Cloud — Enterprise
Custom cloud hosting with dedicated support.
Custom
Free-tier quotas head-to-head
Comparing free on Supabase vs oss on Payload CMS.
| Metric | Supabase | Payload CMS |
|---|---|---|
| bandwidth gb | 5 GB/month | — |
| db storage gb | 0.5 GB | — |
| edge invocations | 500000 invocations/month | — |
| file storage gb | 1 GB | — |
| mau | 50000 users/month | — |
| realtime messages | 2000000 messages/month | — |
Features
Supabase · 24 features
- Authentication — Complete JWT-based auth: passwords, magic links, OTP, OAuth, SSO, phone, MFA.
- Backups & PITR — Automatic daily backups + Point-in-Time Recovery (WAL-G). 14-day default PITR wi…
- Compute Instances — Upgradeable DB compute: Micro, Small, Medium, Large. Affects CPU, RAM, and conne…
- Connection Pooling — Supavisor pooler: Session mode (persistent) and Transaction mode (serverless). D…
- Cron Jobs — Scheduled recurring jobs via pg_cron. Trigger DB functions, edge functions, or H…
- Custom Domains — Configure custom hostname for API endpoints with SSL certificate management.
- Database Webhooks — Async HTTP callbacks on INSERT/UPDATE/DELETE via pg_net extension.
- Edge Functions — TypeScript (Deno runtime) functions deployed globally at the edge. Supports secr…
- Full-Text Search — PostgreSQL native FTS: to_tsvector, to_tsquery, GIN indexes, fuzzy matching, wei…
- Image Transformations — On-the-fly resize, crop, quality (20-100), WebP auto-format. Smart CDN caching. …
- Log Drains — Route all stack logs to HTTP, Datadog, Loki, Sentry, S3, OTLP, or Axiom. Up to 2…
- Metrics API — ~200 Prometheus-compatible Postgres metrics. OpenTelemetry export to Datadog, Gr…
- Network Restrictions — CIDR allowlist for database access. Multiple IP ranges supported. Pro+ plan.
- OAuth 2.1 Server — Use Supabase Auth as OAuth provider. Custom Access Token Hooks for claim injecti…
- pgvector — Store and search vector embeddings in Postgres. Supports HNSW/Flat indexes, cosi…
- PostgreSQL Database — Full PostgreSQL per project: SQL editor, table editor, CSV import, 50+ extension…
- PostgreSQL Extensions — 50+ pre-installed extensions: uuid-ossp, pgvector, pg_cron, plv8, pgtap, pg_net,…
- Preview Branches — Ephemeral or persistent DB branches for isolated testing. Git integration, auto-…
- Queues — Exactly-once message queues built on pgmq. Stored in Postgres with configurable …
- Read Replicas — Async read-only replicas in multiple regions. Geo-routing, replication lag monit…
- Realtime — WebSocket subscriptions for DB changes (INSERT/UPDATE/DELETE), broadcast, and pr…
- Row Level Security — SQL-native access control; policies auto-filter rows based on auth.uid() / auth.…
- SSL Enforcement — Require TLS for all DB connections. Configurable: required, preferred, disabled.
- Storage — Files, Analytics (Iceberg), and Vector buckets with global CDN (285+ cities) and…
Payload CMS · 18 features
- Access Control — Function-based per-collection/field access rules.
- Admin UI — React admin — fully customizable components + views.
- Authentication — Built-in JWT + HTTP-only cookies + API keys.
- Blocks — Flexible page-builder pattern via block field.
- Collections — Schema-defined content types with fields, hooks, access control.
- Drafts & Versions — Version every change. Autosave, drafts, scheduled publish.
- Field Types — Rich field library: text, textarea, richText (Lexical), upload, relation, blocks…
- Form Builder Plugin — Dynamic forms with submissions storage.
- Globals — Single-instance documents (site settings, header, footer).
- GraphQL API (auto) — Full schema auto-generated.
- Hooks — Lifecycle hooks: beforeChange/Read/Delete, afterChange, etc.
- i18n — Multi-locale field values + admin UI translations.
- Live Preview — Side-by-side editor + iframe preview of Next.js site.
- Local API (zero latency) — Direct in-process data access. Ideal for Next.js server components.
- Multi-Tenancy Plugin — Multi-tenant content isolation via plugin.
- @payloadcms/plugin-seo — Built-in SEO meta fields.
- Plugins — Official + community plugins (SEO, Stripe, Form Builder, multi-tenant, etc.).
- REST API (auto) — Auto-generated REST endpoints for every collection.
Developer interfaces
| Kind | Supabase | Payload CMS |
|---|---|---|
| CLI | Supabase CLI | create-payload-app |
| SDK | C# SDK, Flutter SDK, JavaScript SDK, Kotlin SDK, Python SDK, Swift SDK | @payloadcms/next (Node) |
| REST | Management API, REST API (PostgREST) | Payload REST API |
| GRAPHQL | GraphQL (pg_graphql) | Payload GraphQL API |
| MCP | Supabase MCP Server | — |
| OTHER | Realtime (WebSocket) | Admin UI, Local API (Node.js direct) |
Staxly is an independent catalog of developer platforms. Outbound links to Supabase and Payload CMS are plain references to their official websites. Pricing is verified against vendor pages at publication time — reconfirm before buying.
Want this comparison in your AI agent's context? Install the free Staxly MCP server.